Lucene search

MitreCVE-2010-1670

HistoryJul 06, 2010 - 5:17 p.m.

CVE-2010-1670

2010-07-0617:17:14

CWE-287

mitre

web.nvd.nist.gov

mahara

authentication bypass

sso

cve-2010-1670

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.011

Percentile

84.4%

JSON

Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication plugins associated with logins that use the single sign-on (SSO) functionality, which allows remote attackers to bypass authentication via an empty password. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

maharamaharaRange≤1.0.14

maharamaharaMatch0.9.0

maharamaharaMatch0.9.1

maharamaharaMatch0.9.2

maharamaharaMatch1.0.0

maharamaharaMatch1.0.1

maharamaharaMatch1.0.2

maharamaharaMatch1.0.3

maharamaharaMatch1.0.4

maharamaharaMatch1.0.5

maharamaharaMatch1.0.6

maharamaharaMatch1.0.7

maharamaharaMatch1.0.8

maharamaharaMatch1.0.9

maharamaharaMatch1.0.10

maharamaharaMatch1.0.11

maharamaharaMatch1.0.12

maharamaharaMatch1.0.13

Node

maharamaharaMatch1.1.0

maharamaharaMatch1.1.0alpha1

maharamaharaMatch1.1.0alpha2

maharamaharaMatch1.1.0alpha3

maharamaharaMatch1.1.0beta1

maharamaharaMatch1.1.0beta2

maharamaharaMatch1.1.0beta3

maharamaharaMatch1.1.0beta4

maharamaharaMatch1.1.0rc1

maharamaharaMatch1.1.0rc2

maharamaharaMatch1.1.1

maharamaharaMatch1.1.2

maharamaharaMatch1.1.3

maharamaharaMatch1.1.4

maharamaharaMatch1.1.5

maharamaharaMatch1.1.6

maharamaharaMatch1.1.7

maharamaharaMatch1.1.8

Node

maharamaharaMatch1.2.0

maharamaharaMatch1.2.0alpha1

maharamaharaMatch1.2.0alpha2

maharamaharaMatch1.2.0alpha3

maharamaharaMatch1.2.0beta1

maharamaharaMatch1.2.0beta2

maharamaharaMatch1.2.0beta3

maharamaharaMatch1.2.0beta4

maharamaharaMatch1.2.0rc1

maharamaharaMatch1.2.1

maharamaharaMatch1.2.2

maharamaharaMatch1.2.3

maharamaharaMatch1.2.4

VendorProductVersionCPE
maharamahara*cpe:2.3:a:mahara:mahara:*:*:*:*:*:*:*:*
maharamahara0.9.0cpe:2.3:a:mahara:mahara:0.9.0:*:*:*:*:*:*:*
maharamahara0.9.1cpe:2.3:a:mahara:mahara:0.9.1:*:*:*:*:*:*:*
maharamahara0.9.2cpe:2.3:a:mahara:mahara:0.9.2:*:*:*:*:*:*:*
maharamahara1.0.0cpe:2.3:a:mahara:mahara:1.0.0:*:*:*:*:*:*:*
maharamahara1.0.1cpe:2.3:a:mahara:mahara:1.0.1:*:*:*:*:*:*:*
maharamahara1.0.2cpe:2.3:a:mahara:mahara:1.0.2:*:*:*:*:*:*:*
maharamahara1.0.3cpe:2.3:a:mahara:mahara:1.0.3:*:*:*:*:*:*:*
maharamahara1.0.4cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*
maharamahara1.0.5cpe:2.3:a:mahara:mahara:1.0.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mahara	mahara	*	cpe:2.3:a:mahara:mahara::::::::
mahara	mahara	0.9.0	cpe:2.3:a:mahara:mahara:0.9.0:::::::*
mahara	mahara	0.9.1	cpe:2.3:a:mahara:mahara:0.9.1:::::::*
mahara	mahara	0.9.2	cpe:2.3:a:mahara:mahara:0.9.2:::::::*
mahara	mahara	1.0.0	cpe:2.3:a:mahara:mahara:1.0.0:::::::*
mahara	mahara	1.0.1	cpe:2.3:a:mahara:mahara:1.0.1:::::::*
mahara	mahara	1.0.2	cpe:2.3:a:mahara:mahara:1.0.2:::::::*
mahara	mahara	1.0.3	cpe:2.3:a:mahara:mahara:1.0.3:::::::*
mahara	mahara	1.0.4	cpe:2.3:a:mahara:mahara:1.0.4:::::::*
mahara	mahara	1.0.5	cpe:2.3:a:mahara:mahara:1.0.5:::::::*